AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges

A security researcher disclosed a heap buffer overflow in AnyDesk Linux 8.0.2 (named AnyPwn) that allows remote command execution prior to user approval and can lead to root access because the service runs as root. The flaw stems from trusting a remote payload length and a 32-bit arithmetic truncation during allocation, enabling small allocations with large logical lengths and out-of-bounds writes; exploitation uses heap grooming and ROP and has a PoC for direct TCP 7070 connections. AnyDesk released v8.0.3 to fix the issue and administrators are advised to upgrade or restrict TCP 7070.